<?php 
foreach ($_POST as $key=>$val) {
    $_POST[$key] = mysql_real_escape_string(urldecode($_POST[$key]));
}
foreach ($_GET as $key=>$val) {
    $_GET[$key] = mysql_real_escape_string(urldecode($_GET[$key]));	
}

?>
